Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Summary
Title WebSVN: Multiple vulnerabilities
Informations
Name GLSA-200903-20 First vendor Publication 2009-03-09
Vendor Gentoo Last vendor Modification 2009-03-09
Severity (Vendor) Normal Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score 6.8 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

Multiple vulnerabilities in WebSVN allow for file overwrite and information disclosure.

Background

WebSVN is a web-based browsing tool for Subversion repositories written in PHP.

Description

* James Bercegay of GulfTech Security reported a Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl() function in index.php (CVE-2008-5918) and a directory traversal vulnerability in rss.php when magic_quotes_gpc is disabled (CVE-2008-5919).

* Bas van Schaik reported that listing.php does not properly enforce access restrictions when using an SVN authz file to authenticate users (CVE-2009-0240).

Impact

A remote attacker can exploit these vulnerabilities to overwrite arbitrary files, to read changelogs or diffs for restricted projects and to hijack a user's session.

Workaround

There is no known workaround at this time.

Resolution

All WebSVN users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apps/websvn-2.1.0"

References

[ 1 ] CVE-2008-5918 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5918
[ 2 ] CVE-2008-5919 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5919
[ 3 ] CVE-2009-0240 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0240

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200903-20.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-200903-20.xml

CWE : Common Weakness Enumeration

% Id Name
33 % CWE-264 Permissions, Privileges, and Access Controls
33 % CWE-79 Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)
33 % CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13516
 
Oval ID: oval:org.mitre.oval:def:13516
Title: DSA-1725-1 websvn -- programming error
Description: Bas van Schaik discovered that WebSVN, a tool to view Subversion repositories over the web, did not properly restrict access to private repositories, allowing a remote attacker to read significant parts of their content. The old stable distribution is not affected by this problem. For the stable distribution, this problem has been fixed in version 2.0-4+lenny1. For the unstable distribution, this problem has also been fixed in version 2.0-4+lenny1. We recommend that you upgrade your websvn package.
Family: unix Class: patch
Reference(s): DSA-1725-1
CVE-2009-0240
 Version: 5
Platform(s): Debian GNU/Linux 5.0
 Product(s): websvn
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 20

OpenVAS Exploits

Date Description
2009-03-20 Name : Debian Security Advisory DSA 1725-1 (websvn)
File : nvt/deb_1725_1.nasl
2009-03-13 Name : Gentoo Security Advisory GLSA 200903-20 (websvn)
File : nvt/glsa_200903_20.nasl
2009-02-13 Name : FreeBSD Ports: websvn
File : nvt/freebsd_websvn.nasl
2009-01-23 Name : WebSVN Script Multiple Vulnerabilities
File : nvt/secpod_websvn_mult_vuln.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
51611 WebSVN listing.php repname Parameter Remote File Access
49245 WebSVN rss.php rev Variable Traversal Arbitrary File Overwrite
49244 WebSVN index.php URL Parameter XSS

Nessus® Vulnerability Scanner

Date Description
2009-03-10 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200903-20.nasl - Type : ACT_GATHER_INFO
2009-02-17 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-1725.nasl - Type : ACT_GATHER_INFO
2009-02-09 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_71597e3ef6b811dd94d90030843d3802.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
Date Informations
2014-02-17 11:36:22
  • Multiple Updates